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ABSTRACT 

The Sarbanes Oxley Act of 2002 brought about major changes in how accounting firms conduct 
audits of publicly traded companies. Corporate officials have additional responsibilities in the 
areas of internal controls and financial reports. In addition there is a new organization 
responsible for established auditing standards for publicly traded companies, the Public Company 
Accounting Oversight Board. Accordingly, there are new requirements and responsibilities for 
auditors of publicly traded companies. In effect, the emergence of separate auditing standards for 
publicly traded companies and for companies that are not publicly traded is creating two distinct 
fields of auditing. These changes require a different approach to teaching auditing to accounting 
students. This article proposes one approach to teaching these significant changes for entry level 
auditors. 
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A Proposed Supplemental Teaching Model For Enhancing Students’ Understanding Of Sarbanes Oxley 



he Sarbanes-Oxley Act of 2002 (Public Company Accounting Reform and Investor Protection Act of 
2002) was enacted on July 30, 2002 in response to numerous corporate irregularities that were 
heightened by lack of sufficient accounting oversight (Perino, 2002, Langevoort, 2006, Coates, 
2007). Major firms that were involved in questionable accounting practices were Enron, Tyco International, 
HealthSouth, Peregrine Systems and WorldCom. Financial mismanagement pertaining to these firms cost investors 
billions of dollars in equity (and real value). This erosion of investor equity occurred when stock prices dropped 
substantially as a result of public disclosure of the financial mismanagement. Public confidence in the nation's 
securities markets was seriously shaken and eventually fostered major governmental intervention. This legislation 
has been labeled "the most far-reaching reforms of American business practices since the time of the second 
Roosevelt Administration”. 


In essence the lack of audit compliance within the structure of corporate governance led to audit failure that 
was at the center of the reform process. This set of audit and independence irregularities was a contributing factor to 
the enactment of the Sarbanes-Oxley legislation (Chaney and Philipich, 2002; Frankel, Johnson and Nelson, 2002). 
Sarbanes-Oxley (SOX) establishes a set of enhanced standards for all U.S. publicly traded firms, boards of directors, 
corporate financial management operations, and public accounting firms (Romero and Berenson, 2002, Jain and 
Rezaee, 2006). This legislation does not apply to privately held firms. The Act itself contains 11 sections, ranging 
from detailed Corporate Board responsibilities and practices to specific criminal penalties for infractions (Public 
Faw 107-204). The Securities and Exchange Commission (SEC) is also required to implement necessary rulings on 
legislative requirements to comply with this law. 

As part of the SOX Act, a new quasi-public agency, the Public Company Accounting Oversight Board 
(PCAOB) was established. PCAOB is responsible for the overseeing, regulating, inspecting, and disciplining as 
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appropriate public accounting firms that fail in their role as auditors of public companies. SOX also address the issue 
of auditor independence, corporate governance accountability, internal control assessment, and enhanced financial 
disclosure practices (Public Oversight Board. 2002; Public Company Accounting Oversight Board, 2004, Annual 
Report). 


Debate continues over the perceived benefits and costs of SOX implementation and effectiveness. 
Supporters argue that the legislation was necessary and has played a useful role in restoring public confidence in US 
capital markets by strengthening internal accounting controls and defining the rules of engagement of corporate 
boards of directors. Detractors of SOX cite the cost increases due to compliance, lack of evidence of intended 
benefits, and the additional scrutiny placed upon pubic firms and the accounting profession (Coates, 2007). 

This paper provides a framework for integrating the issues and concepts of Sarbanes-Oxley into the 
auditing course of the accounting curriculum. The current auditing course typically covers SOX related topics in one 
chapter on regulation and one chapter on internal controls. The change in the relationship of the auditor and the 
client, the affect on audit fees, the reduction of business risk, and the enhanced effectiveness of the audit are not 
discussed. Expanded use of the client’s internal audit function, reduction in audit risk, and improved internal 
controls are not discussed in depth in current auditing textbooks. 

As the accounting profession changes to adhere to the regulatory requirements of SOX and the oversight 
influences of PCAOB, the auditing class must be adaptive to the inclusion of SOX as a set of discussion topics that 
affects all aspects of the audit. Sections 302 and 404 should be understood within the context of auditor 
independence, internal control mandates, internal control assessments, information technology relationships, 
implications for smaller sized public firms and the effectiveness of the legislation relative to the Congressional 
intent. 


In designing a set of modules within the auditing class that addresses the Sarbanes-Oxley Act, the direction 
and focus must be on the Act’s impact upon the accounting firm, the client, and the role of the auditor as an 
independent agent within the corporate governance structure. The module approach will allow students to 
understand the legislative intent, the role of the agent/principal in the audit process, internal control design and 
assessment within the SOX structure, PCAOB’s role in improving the audit function, and how to assess the 
effectiveness of SOX. 

A matrix of major topics is presented below. This supplemental material is designed to integrate several 
student research experiences within the context of SOX. Student research applications will be focused upon the 
broad headings of SOX effectiveness, small firm implications of SOX, cost-benefit assessment of the SOX process, 
corporate governance and SOX, international firm’s interaction with SOX and the role of the auditor in the 
governance design paradigm. 

As accounting students become familiar with the components of the Sarbanes-Oxley Act, a set of 
classroom discussions will progress. These applications will bring the SOX view into the framework of corporate 
responsibility, governance, agent-principal conveyance, and fraud mitigation practices. This phase of the course will 
entail a student driven research project on a specific topic within the general framework of the SOX mandate. 

One research topic would include having students contrast how audits would differ for a publicly traded 
company and for a nonpublic company. Students would gain an appreciation of how a two tier regulatory system is 
developing and how audit practices would differ. 

A second research topic would be for students to assess internal control structures for both a SEC client and 
a small privately held company. Audit students would be required to assess audit risk, internal control risk, and a 
specific client’s susceptibility to financial improprieties. Students would gain an appreciation of how SOX’s 
actually benefits the investor, the client, and the auditor. 
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Table 1: Topics contained in SOX Discussion Framework 


Module 

Concepts 

Process 

Outcome 

Cost Benefit of 
SOX 

Measure Effectiveness vs. 
Intent 

Evaluate existing literature and readings 

Report/Presentation 
Model (if needed) 

Section 302 

Internal Control 

Certifications 

Self report material weaknesses in internal 
controls—Discuss this approach—SWOT 
analysis 

Process control 
recommendations 

Section 404 

Assessment of Internal 
Controls 

Internal control report, affirmation of 
management responsibility 

Design an internal 
control frame work 

Section 404 

Smaller Public Firms 

SEC assessment of implementation based on 
firm size 

Cost/benefit analysis of 
firm size structure 

Section 404 

Information Technology 
Interaction 

Information technology controls that address 
financial risk 

IT control 
recommendations 

SOX and Non- 
US Companies 

International Aspects of this 
Act 

Bill 198 -, Canada, version of Sarbanes-Oxley 
Act, J-SOX - Japanese version of Sarbanes- 
Oxley Act, CLERP9 - Australian Corporate 
reporting and disclosure law, LSF - French 
version of Sarbanes-Oxley Act, L262/2005 - 
Italian version of Sarbanes-Oxley Act for 
financial services institutions. King Report - 
South African version on Corporate 

Governance 

Comparative analysis of 

international 

implications 


This type of approach to more directly address the Sarbanes-Oxley Act will enhance the overall content of 
the audit course with respect to compliance and strengthen the understanding of the auditor’s role in corporate 
governance. It also will improve students understanding of the two tier approach to auditing. The modules 
suggested in this paper can be further customized for instructor needs and pedagogical design. 
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